{"report_id":"8bfc16bf-bd47-4a04-8a95-bea2521f9bf9","version":6,"status":"done","tags":[],"date":"2026-03-04T12:28:27Z","url":{"schema":"http","addr":"www.samsungvi.com/","fqdn":"www.samsungvi.com","domain":"samsungvi.com","tld":"com"},"ip":{"addr":"45.223.19.142","port":0,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.samsungvi.com/login","fqdn":"www.samsungvi.com","domain":"samsungvi.com","tld":"com"},"title":"SBVI","dom":{"size":8654,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6077)","md5":"dee9fe287fc048e4495807983be66620","sha1":"2449e6d4e92a5e541bc940ab01edd0efd5d5ade5","sha256":"8d7c32471d82a8bb4ef06e016bf3c9cb3c9e4e388e9c0a11052ccc2bedaf5b06","sha512":"1d2588eb4a5ead376e6fcc58460a23387c692573f97b7b1d3fd8c1edf317dde0c7d4b98c9f9aa6b0fc59bc570a7667abd85185ebfc41055c93615ed3482ec45d","ssdeep":"192:zoPWHLmyCw3f5zRzvqpPCVNTsTLUsTLJtDcsoNFxmYsTLpQpi:7qwZRzCpPyNT76tDcsoLxjWQpi","tlshash":"b8026592e218e67e027347ec2422de5d33c6d7cdf6095503a76c42ad0febc647849ad6","dom_hash":"domhash7c2c30b6dce16b95f6f633728f57f2b8","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.samsungvi.com/","fqdn":"www.samsungvi.com","domain":"samsungvi.com","tld":"com"},"ip":{"addr":"45.223.19.142","port":0,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-08T12:28:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.samsungvi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.samsungvi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"api.samsungvi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"api.samsungvi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.samsungvi.com","ip":{"addr":"45.223.19.142","port":443,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"domain_registered":"2024-11-07","domain_rank":0,"first_seen":"2026-03-04T12:28:29.853642Z","last_seen":"2026-03-04T12:28:29.853642Z","alert_count":38,"request_count":19,"received_data":2565353,"sent_data":18008,"comment":"","tags":null,"fingerprints":[{"name":"Imperva","description":"Imperva is a cyber security software and services company for networking, data, and application security.","website":"https://www.imperva.com/","common_platform_enumeration":"","icon":"Imperva.svg","categories":["Security","CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"api.samsungvi.com","ip":{"addr":"45.223.19.142","port":443,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"domain_registered":"2024-11-07","domain_rank":0,"first_seen":"2026-03-04T12:28:29.853691Z","last_seen":"2026-03-04T12:28:29.853691Z","alert_count":6,"request_count":3,"received_data":109135,"sent_data":1535,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Imperva","description":"Imperva is a cyber security software and services company for networking, data, and application security.","website":"https://www.imperva.com/","common_platform_enumeration":"","icon":"Imperva.svg","categories":["Security","CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.samsungvi.com/js/app.9ebc9fc6.js","fqdn":"www.samsungvi.com","domain":"samsungvi.com","tld":"com"},"ip":{"addr":"45.223.19.142","port":443,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e27ba11c778a1e0030854fea0629cd99","sha1":"f0cb21c65580ec79a20d7feafb33382c8eebb765","sha256":"dafb87b324346a916a147694eab78ef70a5ed74613fbfcf3535ddc822da5b5fa","sha512":"88c27deef85637d511e60e27ca63809849520f01fdf8652987e41f1a8c3c8a8af17bf4bc06311c5650ad0ca06312790194bd811f38c65b1babbcc26249880390","ssdeep":"1536:gIi2v21qery7IF19omY47kxTvL6E5SrmJ8g:DiW213riI79omkTV59","tlshash":"1b436cc17218b81c96d70298217f1904a37a3a89b10b8c747678dc59bd77cacb2b7f6d","size":58470,"data":"","first_seen":"2026-03-04T12:28:35.717398Z","last_seen":"2026-03-04T12:28:35.717398Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.samsungvi.com/js/chunk-libs.6fb81f50.js","fqdn":"www.samsungvi.com","domain":"samsungvi.com","tld":"com"},"ip":{"addr":"45.223.19.142","port":443,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e7e8113ed32dedb15d4c76e72cac1af","sha1":"735b626e0dbf628367cd5a6efdcaa34a29d5e4fd","sha256":"31aa49b6e97fcdb0885c848c3f045e712df1c365232a9ad622c9cbc0636ce774","sha512":"c321034adfe389c8dd322dadc3bf8b5f4ed86929fedc17db7c7921bca0a52236cbd14adda01f4b477cf233cd04e9931b08e9744946407a8ed1b315933ceba006","ssdeep":"6144:irhvNDqzxRaFNAs4EoBEcG6IfdhviP1ChcMj/7Kqlt90YbaEaAh7qHMZWEKCuDQG:OhvbNAcoSPbKNC5j/BBB57qXF","tlshash":"1ec406d8b292b06503a714e5403f150bf33a6999740f84a4f2a8f8ea7c7945e9277f7c","size":545507,"data":"","first_seen":"2026-03-04T12:28:35.734827Z","last_seen":"2026-03-04T12:28:35.734827Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.samsungvi.com/js/chunk-default.72f0f4e6.js","fqdn":"www.samsungvi.com","domain":"samsungvi.com","tld":"com"},"ip":{"addr":"45.223.19.142","port":443,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"acabea7b2406560200f6cdabdb27645d","sha1":"08e5ebe4aa473089d4aa35a9110f37ff7206366c","sha256":"296ac884def7f7163d175bf2014f0b6f7e6ed1c15290a4b005eafe5f64051d5e","sha512":"00642fe13a200aec8feec1b4bf93e13ae7c01444fd63c2db416a5fed738001bd108880852f8d409ea16565dfd6f0bf8cc196094a7e157fb5903bc017de46ec0e","ssdeep":"768:CLuERH/G3Xxn/g5gHZV1IEJSkxi3aaUPCIHp7ZniJFNlQJhrGbQlvCMyQlM35GyO:xER8/xb8G","tlshash":"b2e2e8847379d0ad85a3438961ab102c223f375a350b4c78f63cfe6a1ba7d64b153b79","size":34067,"data":"","first_seen":"2026-03-04T12:28:35.736479Z","last_seen":"2026-03-04T12:28:35.736479Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.samsungvi.com/js/login.078bf275.js","fqdn":"www.samsungvi.com","domain":"samsungvi.com","tld":"com"},"ip":{"addr":"45.223.19.142","port":443,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"629165517dc5db2eb37b1e9419855d21","sha1":"fec967d263d035a76a79b6e1fd2f4e5524dc6e6e","sha256":"04ca44f213c081e41e287b03054846133d50ec1cadd9303668691af750270e93","sha512":"db2a3f35855affd2e3042fde8967885095fa65b7334d203dc1059591ac7c764b05355f30245fe91dc185e54ef399b75f35f60f8d392fc10ae97c60103010dc4c","ssdeep":"3072:6LQcDQP7qSq4Y2/RraYiHDKAG/CgFdc+4OjxLIqaYiAgGxiKTga4gMkgM/g6Zgqy:6LQcDa7q/4Y2JraYiGAG/Cejx7aYiAnQ","tlshash":"d3c3e896362688bdd6aa424c90eb5c1462763f0d604344bcf3bc8c9d3bd6e6171adb37","size":128053,"data":"","first_seen":"2026-03-04T12:28:35.731611Z","last_seen":"2026-03-04T12:28:35.731611Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.samsungvi.com/js/chunk-echarts.ccfc4ec0.js","fqdn":"www.samsungvi.com","domain":"samsungvi.com","tld":"com"},"ip":{"addr":"45.223.19.142","port":443,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4bae29003f0f5959f2fd6e192201f027","sha1":"7749b5303ba89890629ac654a8d14e297a795cb4","sha256":"e61329f62eae1066f0ba0840023259c971a1aa803d79ac49a7c9f8ceecc4ca0b","sha512":"d54653abd6e352cec004fb49271c7fbc8cd045c9e38f6773401c233c5e22bb9a46b3de05d40806db14d87cd9f54938f1b14fa9d2622b69cd71ee01b82826f7d4","ssdeep":"12288:qBLebAY8iK0w/eUItzKRaDolz7AZvMIx7PcPBrK4WMiYBf8sKge6:qQbbCIzMaMl3ctcRFWMiYF8sKc","tlshash":"b005f99cb614703543a731b8556f080f9336680da50b85a8fa6ad9da6cbd44f323bf7c","size":836411,"data":"","first_seen":"2026-03-04T12:28:35.730309Z","last_seen":"2026-03-04T12:28:35.730309Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.samsungvi.com/_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3\u0026ns=1\u0026cb=287943454","fqdn":"www.samsungvi.com","domain":"samsungvi.com","tld":"com"},"ip":{"addr":"45.223.19.142","port":443,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3acc1c383a16f24e232d877539811ac","sha1":"3ddbe96371cfb5156a4c2cdbbac99c724737436e","sha256":"1eedc2a69e190c1aa047456c2cc42964cac4d37a3e2da075985d58ec4e4eeb4d","sha512":"00d96dc0f838664b847e991574c80b8f770ab81e8906a98f5a57ea2384858cc3eafd2028dfa8fcb9ee0eb521476a528cd5fe791cbbefd3f235f254e7eea7ecbf","ssdeep":"1536:gjpvB+XtmsJVjArpB618En/ONJyOeO5ppAQITy9qG9MsC4P12nEL/wqlLuEGznrk:gjpvB+XtmsJVjArpBS8En/ONJyOeO5pb","tlshash":"d28306d476c8f817238d9a33bf4e69b9e42b9c62a5c47947c268b59c24fc507c2a5cf0","size":88336,"data":"","first_seen":"2026-03-04T12:28:35.721172Z","last_seen":"2026-03-04T12:28:35.721172Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.samsungvi.com/js/chunk-element-plus.f13d9f2c.js","fqdn":"www.samsungvi.com","domain":"samsungvi.com","tld":"com"},"ip":{"addr":"45.223.19.142","port":443,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a7ebd886fee964c364c0a2d9462d81e","sha1":"aecc0a74d24b20e7fd7cd31769008890a67d8fc0","sha256":"a1ef0e050201ac63977d6dce5333a0a692e6134cbe6d29fbd3be178e5622ffc8","sha512":"9fe6602d6f630b69ee268e0ccbecc8244cc2181e2725921b35f406141e49c7e061249bd90009732c343ab9438a82341e339fe97b21ba408509262085d0bec3a9","ssdeep":"6144:koIQj4pEPcvDTn0t2wqtQwUWVsU1BhzTuV6:hbj4ycXn0t2wqtQwDVpXdO6","tlshash":"a2a42ad17941f42173fa4aca41da0418a33a1f0d74019cf4b2beee1a1a5fd85a16bbfd","size":451581,"data":"","first_seen":"2026-03-04T12:28:35.733888Z","last_seen":"2026-03-04T12:28:35.733888Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"www.samsungvi.com/css/chunk-libs.63fbdf68.css","fqdn":"www.samsungvi.com","domain":"samsungvi.com","tld":"com"},"ip":{"addr":"45.223.19.142","port":443,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.samsungvi.com/","date":"2026-03-04T12:28:05.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.samsungvi.com","organization":"SAMSUNG ELECTRONICS CO,.LTD"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 11 Dec 2025 00:00:00 GMT","end":"Mon, 11 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"0D:87:29:2B:B9:4C:06:62:A1:CF:FC:CA:24:E9:D3:31:29:20:6E:E7","sha256":"B6:DD:2F:4F:44:48:16:48:8E:46:B1:81:13:19:23:9D:01:DA:73:03:93:FE:21:5C:47:29:BE:7B:20:D3:37:F0"}}},"request":{"raw":"GET /css/chunk-libs.63fbdf68.css HTTP/1.1\r\nHost: www.samsungvi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.samsungvi.com/\r\nCookie: visid_incap_3166649=S/MG++tZRS26UdHGFC0CHVMlqGkAAAAAQUIPAAAAAADJhmQ06rOlXwqN973rxupM; incap_ses_7233_3166649=/hKhAQOloXoQbo1JssdgZFQlqGkAAAAA/2flDae3meumca8o+fEXCw==\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 12:28:05 GMT\r\ncontent-type: text/css\r\nserver: nginx\r\nlast-modified: Tue, 03 Mar 2026 06:16:36 GMT\r\netag: \"69a67cc4-733\"\r\naccept-ranges: bytes\r\nx-cdn: Imperva\r\ncontent-encoding: gzip\r\nx-iinfo: 13-50641977-50642078 NNYN CT(263 267 0) RT(1772627283761 1278) q(0 0 5 -1) r(8 8) U24\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Imperva","description":"Imperva is a cyber security software and services company for networking, data, and application security.","website":"https://www.imperva.com/","common_platform_enumeration":"","icon":"Imperva.svg","categories":["Security","CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1843,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1843), with no line terminators","md5":"64b2b4fa42c7d558d735e2cd28ecf88a","sha1":"03d6da6e55b1201b51689590520da495a9233d67","sha256":"2fdb3ce9ccba8355040e5ba3dfb2283194acba81858943b5d88f70030dbb71ea","sha512":"870ebd1188df4e368f9de2b7536e5647db6d1040bdc29cb46b227a6d3a917ab4ff710813246f79a11c5692035798d24f7085f0d8c1763e2d3c0ceea776ff4b69","ssdeep":"","tlshash":"6a3131b30b402b64a7738c263ad67f5436206033c562b5a6e050ecb4c7ca8627d6d78e","first_seen":"2023-04-12T06:56:24Z","last_seen":"2026-04-04T08:46:28.398607Z","times_seen":7809,"resource_available":false,"data":null}},"time_used":830,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":830,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.samsungvi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.samsungvi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.samsungvi.com/lm_iconfont/Samsung/SamsungSSBody-Regular.woff2?t=2026","fqdn":"www.samsungvi.com","domain":"samsungvi.com","tld":"com"},"ip":{"addr":"45.223.19.142","port":443,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.samsungvi.com/","date":"2026-03-04T12:28:06.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.samsungvi.com","organization":"SAMSUNG ELECTRONICS CO,.LTD"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 11 Dec 2025 00:00:00 GMT","end":"Mon, 11 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"0D:87:29:2B:B9:4C:06:62:A1:CF:FC:CA:24:E9:D3:31:29:20:6E:E7","sha256":"B6:DD:2F:4F:44:48:16:48:8E:46:B1:81:13:19:23:9D:01:DA:73:03:93:FE:21:5C:47:29:BE:7B:20:D3:37:F0"}}},"request":{"raw":"GET /lm_iconfont/Samsung/SamsungSSBody-Regular.woff2?t=2026 HTTP/1.1\r\nHost: www.samsungvi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.samsungvi.com/lm_iconfont/lm_iconfont.css\r\nCookie: visid_incap_3166649=S/MG++tZRS26UdHGFC0CHVMlqGkAAAAAQUIPAAAAAADJhmQ06rOlXwqN973rxupM; incap_ses_7233_3166649=/hKhAQOloXoQbo1JssdgZFQlqGkAAAAA/2flDae3meumca8o+fEXCw==; ___utmvc=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\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 12:28:06 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 56888\r\nserver: nginx\r\nlast-modified: Tue, 03 Mar 2026 06:16:36 GMT\r\netag: \"69a67cc4-de38\"\r\naccept-ranges: bytes\r\nset-cookie: ___utmvc=a; Max-Age=0; path=/; expires=Fri, 20 Feb 2026 22:23:58 GMT\r\nx-cdn: Imperva\r\nx-iinfo: 13-50641977-50642076 PNNN RT(1772627283761 3044) q(0 0 0 -1) r(3 3) U24\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Imperva","description":"Imperva is a cyber security software and services company for networking, data, and application security.","website":"https://www.imperva.com/","common_platform_enumeration":"","icon":"Imperva.svg","categories":["Security","CDN"]}],"data":{"size":56888,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 56888, version 0.0","md5":"92531d92c81b5effa896529d928250bb","sha1":"2acab700c2954470d056e805c6e9586b8b4255a7","sha256":"a2feb7ff4eb8d162aa6df708e52fedc95425e172529478459fed2501acbd8e98","sha512":"836ce86be3dc8344bb4b02deb52b477e4b3726f2b80c066fa4c2bc53d7782b138b2f2889e14251a324b33af1d29527b9b5bd94572ff73ae800700a4c0cb9b305","ssdeep":"1536:umPh3vyVk8R4Qv/7jqSsBzanPxexrY6Azbw:thO//qbzS89Az8","tlshash":"11430163bc5c374ae282fafb1c5479edab078d13a1959074e90bf527b3895403973828","first_seen":"2026-03-04T12:28:35.694545Z","last_seen":"2026-03-04T12:28:35.694545Z","times_seen":1,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":279,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.samsungvi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.samsungvi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.samsungvi.com/vi/system/lang/list","fqdn":"api.samsungvi.com","domain":"samsungvi.com","tld":"com"},"ip":{"addr":"45.223.19.142","port":443,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.samsungvi.com/","date":"2026-03-04T12:28:07.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.samsungvi.com","organization":"SAMSUNG ELECTRONICS CO,.LTD"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 11 Dec 2025 00:00:00 GMT","end":"Mon, 11 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"0D:87:29:2B:B9:4C:06:62:A1:CF:FC:CA:24:E9:D3:31:29:20:6E:E7","sha256":"B6:DD:2F:4F:44:48:16:48:8E:46:B1:81:13:19:23:9D:01:DA:73:03:93:FE:21:5C:47:29:BE:7B:20:D3:37:F0"}}},"request":{"raw":"GET /vi/system/lang/list HTTP/1.1\r\nHost: api.samsungvi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Language: en\r\nOrigin: https://www.samsungvi.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.samsungvi.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 12:28:08 GMT\r\ncontent-type: application/json;charset=utf-8\r\nserver: nginx\r\naccess-control-allow-origin: *\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nset-cookie: visid_incap_3166650=XYJaZPqYRyijwI8M4vEDPlclqGkAAAAAQUIPAAAAAADJo7RcisXryJidGkmEkrVm; expires=Wed, 03 Mar 2027 22:31:36 GMT; HttpOnly; path=/; Domain=.samsungvi.com\nincap_ses_7233_3166650=jYmub5lgM0zMcI1JssdgZFglqGkAAAAA3tPKxictcQMyGVt9nYizDA==; path=/; Domain=.samsungvi.com\r\nx-cdn: Imperva\r\ncontent-encoding: gzip\r\nx-iinfo: 7-32866792-32866795 NNYN CT(345 533 0) RT(1772627287765 17) q(0 0 9 0) r(12 12) U24\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Imperva","description":"Imperva is a cyber security software and services company for networking, data, and application security.","website":"https://www.imperva.com/","common_platform_enumeration":"","icon":"Imperva.svg","categories":["Security","CDN"]}],"data":{"size":65964,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a8efa0960cbadf57ec89628e8abc0c42","sha1":"84742400fe19a022056b0ac57981a572d57d1771","sha256":"dfa44840db61be83b263ac017e4e57cc39acc147ad060782d28f23c91051f03d","sha512":"669cf8606119ae934921b225b705252545fd6caa27acca022da720ac551214f6a417a677387dee9074f690812530075436268f1b918d2416b342205d020f19a7","ssdeep":"1536:9FzjcHfC/V5eVsGLrqW8D5297QYpIcGmfSQxyL4RpsMHc2fdH5+PWPhatF:92fCTeDBZRpsz2GF","tlshash":"735330a5572edcb6414cafe93bc30164207a5cdac7f9ca70f4588e64c65efd8432b628","first_seen":"2026-03-04T12:28:35.697175Z","last_seen":"2026-03-04T12:28:35.697175Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1990,"timings":{"blocked":405,"dns":381,"connect":8,"send":0,"wait":1180,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"api.samsungvi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"api.samsungvi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.samsungvi.com/vi/system/groupCode/list","fqdn":"api.samsungvi.com","domain":"samsungvi.com","tld":"com"},"ip":{"addr":"45.223.19.142","port":443,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.samsungvi.com/","date":"2026-03-04T12:28:09.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.samsungvi.com","organization":"SAMSUNG ELECTRONICS CO,.LTD"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 11 Dec 2025 00:00:00 GMT","end":"Mon, 11 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"0D:87:29:2B:B9:4C:06:62:A1:CF:FC:CA:24:E9:D3:31:29:20:6E:E7","sha256":"B6:DD:2F:4F:44:48:16:48:8E:46:B1:81:13:19:23:9D:01:DA:73:03:93:FE:21:5C:47:29:BE:7B:20:D3:37:F0"}}},"request":{"raw":"GET /vi/system/groupCode/list HTTP/1.1\r\nHost: api.samsungvi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Language: en\r\nOrigin: https://www.samsungvi.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.samsungvi.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 12:28:09 GMT\r\ncontent-type: application/json;charset=utf-8\r\nserver: nginx\r\naccess-control-allow-origin: *\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nset-cookie: visid_incap_3166650=XYJaZPqYRyijwI8M4vEDPlclqGkAAAAAQUIPAAAAAADJo7RcisXryJidGkmEkrVm; expires=Wed, 03 Mar 2027 22:31:36 GMT; HttpOnly; path=/; Domain=.samsungvi.com\nincap_ses_7233_3166650=i7bxO9OL11nMcI1JssdgZFklqGkAAAAAFmoSXd+efXuP8XVTGveCuQ==; path=/; Domain=.samsungvi.com\r\nx-cdn: Imperva\r\ncontent-encoding: gzip\r\nx-iinfo: 7-32866792-32866795 PNYN RT(1772627287765 1747) q(0 0 0 1) r(3 3) U24\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Imperva","description":"Imperva is a cyber security software and services company for networking, data, and application security.","website":"https://www.imperva.com/","common_platform_enumeration":"","icon":"Imperva.svg","categories":["Security","CDN"]}],"data":{"size":41095,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7d915e1307cc21a6caae5f653cb71d9c","sha1":"9b71387834622f7bb6cf33ce13114960cbc60bdb","sha256":"6e78b59bab49f6a3757e185cd72fd4d2c9ae273790632739365ca2f098eff8d7","sha512":"cc0c3c486321055ab8800f4b6fe94f4634bf69f050e8a7c8e3d80692d0403e187c8a6cf4a464f69e9cfa9af2f6858a06a87bb476e485374796959d3376bdb1e8","ssdeep":"192:+P41ww6+1xoeHSsPtz1mGSLsHmW27G2MPAo9q2y2NHTH7vH:+P41ww6+1x9SsPtsGEgAo9q2y2RH","tlshash":"3c03897a549c8c7f655628c032cfdec968bd0282ebd419272ece9f3866d1375843b2e5","first_seen":"2026-03-04T12:28:35.700593Z","last_seen":"2026-03-04T12:28:35.700593Z","times_seen":1,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"api.samsungvi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"api.samsungvi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.samsungvi.com/css/chunk-default.15b5d3ab.css","fqdn":"www.samsungvi.com","domain":"samsungvi.com","tld":"com"},"ip":{"addr":"45.223.19.142","port":443,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.samsungvi.com/","date":"2026-03-04T12:28:09.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.samsungvi.com","organization":"SAMSUNG ELECTRONICS CO,.LTD"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 11 Dec 2025 00:00:00 GMT","end":"Mon, 11 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"0D:87:29:2B:B9:4C:06:62:A1:CF:FC:CA:24:E9:D3:31:29:20:6E:E7","sha256":"B6:DD:2F:4F:44:48:16:48:8E:46:B1:81:13:19:23:9D:01:DA:73:03:93:FE:21:5C:47:29:BE:7B:20:D3:37:F0"}}},"request":{"raw":"GET /css/chunk-default.15b5d3ab.css HTTP/1.1\r\nHost: www.samsungvi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.samsungvi.com/\r\nCookie: visid_incap_3166649=S/MG++tZRS26UdHGFC0CHVMlqGkAAAAAQUIPAAAAAADJhmQ06rOlXwqN973rxupM; incap_ses_7233_3166649=/hKhAQOloXoQbo1JssdgZFQlqGkAAAAA/2flDae3meumca8o+fEXCw==\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 12:28:09 GMT\r\ncontent-type: text/css\r\nserver: nginx\r\nlast-modified: Tue, 03 Mar 2026 06:16:36 GMT\r\netag: \"69a67cc4-100d\"\r\naccept-ranges: bytes\r\nx-cdn: Imperva\r\ncontent-encoding: gzip\r\nx-iinfo: 13-50641977-50642072 PNYN RT(1772627283761 5770) q(0 0 0 -1) r(2 2) U24\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Imperva","description":"Imperva is a cyber security software and services company for networking, data, and application security.","website":"https://www.imperva.com/","common_platform_enumeration":"","icon":"Imperva.svg","categories":["Security","CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4109,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4109), with no line terminators","md5":"66154d880cd777ac55a0a4de7a80bc94","sha1":"1b3d6ae0f7671c16a993acda4543ea2871f5296b","sha256":"ee18e431bfa742fbcb49b95d88264a43e1f7f3492503afaf27d648e866ad1748","sha512":"be9edb1d453171f0bbbc4e164ef34912da2c1c348274c0790cd325a2ed7fc2cc6b3e2849a0a565e1a3819aea19619fa2ada26e96d3c0caabf859f91459fd61d6","ssdeep":"96:5FZ/GjhpqS5CsikRTAxa99DNsZ9oGWRbWEJKdzvH3B:5P+qS5CsiklcHDVPx","tlshash":"4c812120751c862c843be294f9e61a5a9762d213ca0787d7cc19ab31cdcb58739bb7c9","first_seen":"2026-03-04T12:28:35.703883Z","last_seen":"2026-03-04T12:28:35.703883Z","times_seen":1,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.samsungvi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.samsungvi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.samsungvi.com/","fqdn":"www.samsungvi.com","domain":"samsungvi.com","tld":"com"},"ip":{"addr":"45.223.19.142","port":443,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-04T12:28:03.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.samsungvi.com","organization":"SAMSUNG ELECTRONICS CO,.LTD"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 11 Dec 2025 00:00:00 GMT","end":"Mon, 11 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"0D:87:29:2B:B9:4C:06:62:A1:CF:FC:CA:24:E9:D3:31:29:20:6E:E7","sha256":"B6:DD:2F:4F:44:48:16:48:8E:46:B1:81:13:19:23:9D:01:DA:73:03:93:FE:21:5C:47:29:BE:7B:20:D3:37:F0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.samsungvi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 12:28:04 GMT\r\ncontent-type: text/html\r\nserver: nginx\r\nlast-modified: Tue, 03 Mar 2026 06:16:36 GMT\r\netag: \"69a67cc4-35e\"\r\naccept-ranges: bytes\r\nset-cookie: visid_incap_3166649=S/MG++tZRS26UdHGFC0CHVMlqGkAAAAAQUIPAAAAAADJhmQ06rOlXwqN973rxupM; expires=Wed, 03 Mar 2027 22:31:36 GMT; HttpOnly; path=/; Domain=.samsungvi.com\nincap_ses_7233_3166649=/hKhAQOloXoQbo1JssdgZFQlqGkAAAAA/2flDae3meumca8o+fEXCw==; path=/; Domain=.samsungvi.com\r\nx-cdn: Imperva\r\ncontent-encoding: gzip\r\nx-iinfo: 13-50641977-50641979 NNYN CT(265 531 0) RT(1772627283761 16) q(0 0 8 0) r(11 11) U24\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Imperva","description":"Imperva is a cyber security software and services company for networking, data, and application security.","website":"https://www.imperva.com/","common_platform_enumeration":"","icon":"Imperva.svg","categories":["Security","CDN"]}],"data":{"size":995,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (995), with no line terminators","md5":"20b7a65721623379f63f0188bb567622","sha1":"aca98518778df6ea2c69e1541454a7567d578b83","sha256":"6ecada3ca18332a11a03cdf6facf2f0c3a5732f721759b6331a4ec6a7b3b9935","sha512":"e795748d457d42470c3602c441674d3723624d77060c2c790cf6cb3b69bd812362befea0eb8b6e1fcf0f88a82094a92be40b614bfa762db74601074cf4a363a2","ssdeep":"","tlshash":"fb11cb86cc0485cc53202f57bc76f26ec1c92d0d8a31ec91a6ad827e5af8bc89926d14","first_seen":"2026-03-04T12:28:35.712688Z","last_seen":"2026-03-04T12:28:35.712688Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1873,"timings":{"blocked":400,"dns":377,"connect":8,"send":0,"wait":1073,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.samsungvi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.samsungvi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.samsungvi.com/lm_iconfont/lm_iconfont.css","fqdn":"www.samsungvi.com","domain":"samsungvi.com","tld":"com"},"ip":{"addr":"45.223.19.142","port":443,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.samsungvi.com/","date":"2026-03-04T12:28:05.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.samsungvi.com","organization":"SAMSUNG ELECTRONICS CO,.LTD"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 11 Dec 2025 00:00:00 GMT","end":"Mon, 11 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"0D:87:29:2B:B9:4C:06:62:A1:CF:FC:CA:24:E9:D3:31:29:20:6E:E7","sha256":"B6:DD:2F:4F:44:48:16:48:8E:46:B1:81:13:19:23:9D:01:DA:73:03:93:FE:21:5C:47:29:BE:7B:20:D3:37:F0"}}},"request":{"raw":"GET /lm_iconfont/lm_iconfont.css HTTP/1.1\r\nHost: www.samsungvi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.samsungvi.com/\r\nCookie: visid_incap_3166649=S/MG++tZRS26UdHGFC0CHVMlqGkAAAAAQUIPAAAAAADJhmQ06rOlXwqN973rxupM; incap_ses_7233_3166649=/hKhAQOloXoQbo1JssdgZFQlqGkAAAAA/2flDae3meumca8o+fEXCw==\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 12:28:05 GMT\r\ncontent-type: text/css\r\nserver: nginx\r\nlast-modified: Tue, 03 Mar 2026 06:16:36 GMT\r\netag: \"69a67cc4-3f1\"\r\naccept-ranges: bytes\r\nx-cdn: Imperva\r\ncontent-encoding: gzip\r\nx-iinfo: 13-50641977-50641979 PNYN RT(1772627283761 1269) q(0 0 0 -1) r(2 2) U24\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Imperva","description":"Imperva is a cyber security software and services company for networking, data, and application security.","website":"https://www.imperva.com/","common_platform_enumeration":"","icon":"Imperva.svg","categories":["Security","CDN"]}],"data":{"size":1009,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"6ab3effeef4c7a9bbba8510e03879e95","sha1":"7ea31edcc7166c39c7aa441a7715f449f6510027","sha256":"3d9e1c745ab1a9aa09f3dcf8da83b16c4bbc2242e0e067503b6630b775cb5700","sha512":"1588818c1a02472f555ae46201db3c4cfaf3ea5a9941eb7117a19c5803970b33de00db3e9072d8189f27801f1cd64f967cd01ccabbf6b6edc3785dcca0a6eecc","ssdeep":"","tlshash":"bb11c4a1badf71603aef945db7dbc5145b8a1c08080cd00275ad3540ae7ab0749b2e9e","first_seen":"2026-03-04T12:28:35.714842Z","last_seen":"2026-03-04T12:28:35.714842Z","times_seen":1,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.samsungvi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.samsungvi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.samsungvi.com/js/app.9ebc9fc6.js","fqdn":"www.samsungvi.com","domain":"samsungvi.com","tld":"com"},"ip":{"addr":"45.223.19.142","port":443,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.samsungvi.com/","date":"2026-03-04T12:28:05.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.samsungvi.com","organization":"SAMSUNG ELECTRONICS CO,.LTD"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 11 Dec 2025 00:00:00 GMT","end":"Mon, 11 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"0D:87:29:2B:B9:4C:06:62:A1:CF:FC:CA:24:E9:D3:31:29:20:6E:E7","sha256":"B6:DD:2F:4F:44:48:16:48:8E:46:B1:81:13:19:23:9D:01:DA:73:03:93:FE:21:5C:47:29:BE:7B:20:D3:37:F0"}}},"request":{"raw":"GET /js/app.9ebc9fc6.js HTTP/1.1\r\nHost: www.samsungvi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.samsungvi.com/\r\nCookie: visid_incap_3166649=S/MG++tZRS26UdHGFC0CHVMlqGkAAAAAQUIPAAAAAADJhmQ06rOlXwqN973rxupM; incap_ses_7233_3166649=/hKhAQOloXoQbo1JssdgZFQlqGkAAAAA/2flDae3meumca8o+fEXCw==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 12:28:05 GMT\r\ncontent-type: application/javascript\r\nserver: nginx\r\nlast-modified: Tue, 03 Mar 2026 06:16:36 GMT\r\netag: \"69a67cc4-e466\"\r\naccept-ranges: bytes\r\nx-cdn: Imperva\r\ncontent-encoding: gzip\r\nx-iinfo: 13-50641977-50642074 NNYN CT(265 268 0) RT(1772627283761 1275) q(0 0 5 -1) r(8 8) U24\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Imperva","description":"Imperva is a cyber security software and services company for networking, data, and application security.","website":"https://www.imperva.com/","common_platform_enumeration":"","icon":"Imperva.svg","categories":["Security","CDN"]}],"data":{"size":58470,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (58370), with no line terminators","md5":"e27ba11c778a1e0030854fea0629cd99","sha1":"f0cb21c65580ec79a20d7feafb33382c8eebb765","sha256":"dafb87b324346a916a147694eab78ef70a5ed74613fbfcf3535ddc822da5b5fa","sha512":"88c27deef85637d511e60e27ca63809849520f01fdf8652987e41f1a8c3c8a8af17bf4bc06311c5650ad0ca06312790194bd811f38c65b1babbcc26249880390","ssdeep":"1536:gIi2v21qery7IF19omY47kxTvL6E5SrmJ8g:DiW213riI79omkTV59","tlshash":"1b436cc17218b81c96d70298217f1904a37a3a89b10b8c747678dc59bd77cacb2b7f6d","first_seen":"2026-03-04T12:28:35.717398Z","last_seen":"2026-03-04T12:28:35.717398Z","times_seen":1,"resource_available":true,"data":null}},"time_used":833,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":833,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.samsungvi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.samsungvi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.samsungvi.com/_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3\u0026ns=1\u0026cb=287943454","fqdn":"www.samsungvi.com","domain":"samsungvi.com","tld":"com"},"ip":{"addr":"45.223.19.142","port":443,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.samsungvi.com/","date":"2026-03-04T12:28:05.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.samsungvi.com","organization":"SAMSUNG ELECTRONICS CO,.LTD"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 11 Dec 2025 00:00:00 GMT","end":"Mon, 11 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"0D:87:29:2B:B9:4C:06:62:A1:CF:FC:CA:24:E9:D3:31:29:20:6E:E7","sha256":"B6:DD:2F:4F:44:48:16:48:8E:46:B1:81:13:19:23:9D:01:DA:73:03:93:FE:21:5C:47:29:BE:7B:20:D3:37:F0"}}},"request":{"raw":"GET /_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3\u0026ns=1\u0026cb=287943454 HTTP/1.1\r\nHost: www.samsungvi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.samsungvi.com/\r\nCookie: visid_incap_3166649=S/MG++tZRS26UdHGFC0CHVMlqGkAAAAAQUIPAAAAAADJhmQ06rOlXwqN973rxupM; incap_ses_7233_3166649=/hKhAQOloXoQbo1JssdgZFQlqGkAAAAA/2flDae3meumca8o+fEXCw==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\nx-robots-tag: noindex\r\ncontent-length: 20957\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":88336,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b3acc1c383a16f24e232d877539811ac","sha1":"3ddbe96371cfb5156a4c2cdbbac99c724737436e","sha256":"1eedc2a69e190c1aa047456c2cc42964cac4d37a3e2da075985d58ec4e4eeb4d","sha512":"00d96dc0f838664b847e991574c80b8f770ab81e8906a98f5a57ea2384858cc3eafd2028dfa8fcb9ee0eb521476a528cd5fe791cbbefd3f235f254e7eea7ecbf","ssdeep":"1536:gjpvB+XtmsJVjArpB618En/ONJyOeO5ppAQITy9qG9MsC4P12nEL/wqlLuEGznrk:gjpvB+XtmsJVjArpBS8En/ONJyOeO5pb","tlshash":"d28306d476c8f817238d9a33bf4e69b9e42b9c62a5c47947c268b59c24fc507c2a5cf0","first_seen":"2026-03-04T12:28:35.721172Z","last_seen":"2026-03-04T12:28:35.721172Z","times_seen":1,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.samsungvi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.samsungvi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.samsungvi.com/css/app.f3a891b3.css","fqdn":"www.samsungvi.com","domain":"samsungvi.com","tld":"com"},"ip":{"addr":"45.223.19.142","port":443,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.samsungvi.com/","date":"2026-03-04T12:28:05.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.samsungvi.com","organization":"SAMSUNG ELECTRONICS CO,.LTD"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 11 Dec 2025 00:00:00 GMT","end":"Mon, 11 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"0D:87:29:2B:B9:4C:06:62:A1:CF:FC:CA:24:E9:D3:31:29:20:6E:E7","sha256":"B6:DD:2F:4F:44:48:16:48:8E:46:B1:81:13:19:23:9D:01:DA:73:03:93:FE:21:5C:47:29:BE:7B:20:D3:37:F0"}}},"request":{"raw":"GET /css/app.f3a891b3.css HTTP/1.1\r\nHost: www.samsungvi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.samsungvi.com/\r\nCookie: visid_incap_3166649=S/MG++tZRS26UdHGFC0CHVMlqGkAAAAAQUIPAAAAAADJhmQ06rOlXwqN973rxupM; incap_ses_7233_3166649=/hKhAQOloXoQbo1JssdgZFQlqGkAAAAA/2flDae3meumca8o+fEXCw==\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 12:28:05 GMT\r\ncontent-type: text/css\r\nserver: nginx\r\nlast-modified: Tue, 03 Mar 2026 06:16:36 GMT\r\netag: \"69a67cc4-30a3\"\r\naccept-ranges: bytes\r\nx-cdn: Imperva\r\ncontent-encoding: gzip\r\nx-iinfo: 13-50641977-50641979 PNYN RT(1772627283761 1279) q(0 2 2 -1) r(5 5) U24\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Imperva","description":"Imperva is a cyber security software and services company for networking, data, and application security.","website":"https://www.imperva.com/","common_platform_enumeration":"","icon":"Imperva.svg","categories":["Security","CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12451,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (12443), with no line terminators","md5":"0496610ddd3f632ce08dfb6c1a340f24","sha1":"2d94b4cc8912a1833f191e00bb80cc236303533b","sha256":"047c1ae0414a9b5fea1326a77906726d93d204f9b93d4bdcc630854188111f45","sha512":"cc83af1483a0da90e468c2c18d629ec4db9605ffafafb128199434ac9a31bbfac05bca2a259179e86319fda833e9a3dda0ca3926d5142f89143a07bbd0a7fbdc","ssdeep":"384:IoYdWSEh6+hSTHubDiuDPNDrRfDdTTmDuDMDgDmDoDnDcDjDIHuFAyBzjb9:IdEh6+hmHuawHuFJBzjb9","tlshash":"5b426412b75f142da12b458e70517daeaf358303d255daf5f81d2a2bcec38933666b0c","first_seen":"2026-03-04T12:28:35.723298Z","last_seen":"2026-03-04T12:28:35.723298Z","times_seen":1,"resource_available":false,"data":null}},"time_used":540,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":540,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.samsungvi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.samsungvi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.samsungvi.com/lm_iconfont/Samsung/SamsungSSHead-Bold.woff2?t=2026","fqdn":"www.samsungvi.com","domain":"samsungvi.com","tld":"com"},"ip":{"addr":"45.223.19.142","port":443,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.samsungvi.com/","date":"2026-03-04T12:28:11.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.samsungvi.com","organization":"SAMSUNG ELECTRONICS CO,.LTD"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 11 Dec 2025 00:00:00 GMT","end":"Mon, 11 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"0D:87:29:2B:B9:4C:06:62:A1:CF:FC:CA:24:E9:D3:31:29:20:6E:E7","sha256":"B6:DD:2F:4F:44:48:16:48:8E:46:B1:81:13:19:23:9D:01:DA:73:03:93:FE:21:5C:47:29:BE:7B:20:D3:37:F0"}}},"request":{"raw":"GET /lm_iconfont/Samsung/SamsungSSHead-Bold.woff2?t=2026 HTTP/1.1\r\nHost: www.samsungvi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.samsungvi.com/lm_iconfont/lm_iconfont.css\r\nCookie: visid_incap_3166649=S/MG++tZRS26UdHGFC0CHVMlqGkAAAAAQUIPAAAAAADJhmQ06rOlXwqN973rxupM; incap_ses_7233_3166649=/hKhAQOloXoQbo1JssdgZFQlqGkAAAAA/2flDae3meumca8o+fEXCw==\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 12:28:11 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 51248\r\nserver: nginx\r\nlast-modified: Tue, 03 Mar 2026 06:16:36 GMT\r\netag: \"69a67cc4-c830\"\r\naccept-ranges: bytes\r\nx-cdn: Imperva\r\nx-iinfo: 13-50641977-50642070 PNNN RT(1772627283761 7379) q(0 0 0 -1) r(2 2) U24\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Imperva","description":"Imperva is a cyber security software and services company for networking, data, and application security.","website":"https://www.imperva.com/","common_platform_enumeration":"","icon":"Imperva.svg","categories":["Security","CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":51248,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 51248, version 0.0","md5":"e783b0e15bfba821ad5534daf5f83649","sha1":"1d0b1e5404783446da077df28c1fea625392290b","sha256":"746bbe76f063aa90c0cb869462b43d8a1c746ec5d977a66b9f1388e94a70820b","sha512":"65b922a82ffebb064c9f522cc7ed5cd12dc8158a22f8fd22fe71b8faf57f9f931302be589019e9c9e800b1e6347eff715dc7b5d03b7b0ed1ee3dd6e73651ea4d","ssdeep":"1536:c+gbf3ur6Ha358aCV8i+YDn6usKNpVU58mOF2H:cPT30lGr8cDY8m26","tlshash":"2c3302794bcb33fab5371bb2511d802fde9ec137afa4563a257a62002472a8c725d521","first_seen":"2026-03-04T12:28:35.725247Z","last_seen":"2026-03-04T12:28:35.725247Z","times_seen":1,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":281,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.samsungvi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.samsungvi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.samsungvi.com/lm_iconfont/Samsung/SamsungSSHead-Medium.woff2?t=2026","fqdn":"www.samsungvi.com","domain":"samsungvi.com","tld":"com"},"ip":{"addr":"45.223.19.142","port":443,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.samsungvi.com/","date":"2026-03-04T12:28:11.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.samsungvi.com","organization":"SAMSUNG ELECTRONICS CO,.LTD"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 11 Dec 2025 00:00:00 GMT","end":"Mon, 11 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"0D:87:29:2B:B9:4C:06:62:A1:CF:FC:CA:24:E9:D3:31:29:20:6E:E7","sha256":"B6:DD:2F:4F:44:48:16:48:8E:46:B1:81:13:19:23:9D:01:DA:73:03:93:FE:21:5C:47:29:BE:7B:20:D3:37:F0"}}},"request":{"raw":"GET /lm_iconfont/Samsung/SamsungSSHead-Medium.woff2?t=2026 HTTP/1.1\r\nHost: www.samsungvi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.samsungvi.com/lm_iconfont/lm_iconfont.css\r\nCookie: visid_incap_3166649=S/MG++tZRS26UdHGFC0CHVMlqGkAAAAAQUIPAAAAAADJhmQ06rOlXwqN973rxupM; incap_ses_7233_3166649=/hKhAQOloXoQbo1JssdgZFQlqGkAAAAA/2flDae3meumca8o+fEXCw==\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 12:28:11 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 53432\r\nserver: nginx\r\nlast-modified: Tue, 03 Mar 2026 06:16:36 GMT\r\netag: \"69a67cc4-d0b8\"\r\naccept-ranges: bytes\r\nx-cdn: Imperva\r\nx-iinfo: 13-50641977-50642078 PNNN RT(1772627283761 7381) q(0 0 0 -1) r(2 2) U24\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Imperva","description":"Imperva is a cyber security software and services company for networking, data, and application security.","website":"https://www.imperva.com/","common_platform_enumeration":"","icon":"Imperva.svg","categories":["Security","CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":53432,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 53432, version 0.0","md5":"d3ae040f218f0e4c1f3b74f5d14b06c6","sha1":"83ba88be0e96625051f2178be5d46ee1f9b874b6","sha256":"f7d08bd264375afc8be265f6f36073261648b05658b012684f236b224318b1aa","sha512":"0b3e67906844d754cb01aa111634db2f2a14e0053cc361740d614355761aa7660c47f4b38856f294ea7840b92ccf2c99a59861cd6b4b0f8eeaee66b87cd12957","ssdeep":"1536:VPQLj5WAgCTjH6rwJLnpkw73Ng6pLmWvkW+:NQZECi8JLaw73Ng651vkW+","tlshash":"713302f78b93706cda763ba01db1ef02291e48d2a1f8614bb8e6e4e40441e9cdd6d5c3","first_seen":"2026-03-04T12:28:35.726878Z","last_seen":"2026-03-04T12:28:35.726878Z","times_seen":1,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":291,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.samsungvi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.samsungvi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.samsungvi.com/css/chunk-element-plus.8400d654.css","fqdn":"www.samsungvi.com","domain":"samsungvi.com","tld":"com"},"ip":{"addr":"45.223.19.142","port":443,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.samsungvi.com/","date":"2026-03-04T12:28:05.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.samsungvi.com","organization":"SAMSUNG ELECTRONICS CO,.LTD"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 11 Dec 2025 00:00:00 GMT","end":"Mon, 11 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"0D:87:29:2B:B9:4C:06:62:A1:CF:FC:CA:24:E9:D3:31:29:20:6E:E7","sha256":"B6:DD:2F:4F:44:48:16:48:8E:46:B1:81:13:19:23:9D:01:DA:73:03:93:FE:21:5C:47:29:BE:7B:20:D3:37:F0"}}},"request":{"raw":"GET /css/chunk-element-plus.8400d654.css HTTP/1.1\r\nHost: www.samsungvi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.samsungvi.com/\r\nCookie: visid_incap_3166649=S/MG++tZRS26UdHGFC0CHVMlqGkAAAAAQUIPAAAAAADJhmQ06rOlXwqN973rxupM; incap_ses_7233_3166649=/hKhAQOloXoQbo1JssdgZFQlqGkAAAAA/2flDae3meumca8o+fEXCw==\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 12:28:05 GMT\r\ncontent-type: text/css\r\nserver: nginx\r\nlast-modified: Tue, 03 Mar 2026 06:16:36 GMT\r\netag: \"69a67cc4-2e091\"\r\naccept-ranges: bytes\r\nx-cdn: Imperva\r\ncontent-encoding: gzip\r\nx-iinfo: 13-50641977-50642076 NNYN CT(264 267 0) RT(1772627283761 1276) q(0 0 5 -1) r(8 8) U24\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Imperva","description":"Imperva is a cyber security software and services company for networking, data, and application security.","website":"https://www.imperva.com/","common_platform_enumeration":"","icon":"Imperva.svg","categories":["Security","CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":188561,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"997c3d33cdd04f1a9dd1e1cc4e648491","sha1":"b79729bc791f30d044eeaa718cbf486b13f00b42","sha256":"a924422d83e7e0fc928378106c79fb4e3b8c399145fa8ef3e1ec8782efaf9064","sha512":"df63262f5c1ed40357eac8317a7d35bb41029b3e1b80535da3ccaa486bd0a610dd4ec82c971045a7db01eb1f87a177aaea55f1c7b91e27fa5b8b76ea29a9b179","ssdeep":"1536:BGTSiWhn7cjoIc+ORFyVOdmMJ2E0Lu1OksS24kiYJkrn2kcndl6T7wtK+tnB5:LFn1jF24kF","tlshash":"1d048265e713a93b281be67c6ec4d9996f14dfa1c90247b1f680e00881c7de512e7e3e","first_seen":"2026-03-04T12:28:35.728395Z","last_seen":"2026-03-04T12:28:35.728395Z","times_seen":1,"resource_available":false,"data":null}},"time_used":832,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":832,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.samsungvi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.samsungvi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.samsungvi.com/_Incapsula_Resource?SWKMTFSR=1\u0026e=0.34468077636878003","fqdn":"www.samsungvi.com","domain":"samsungvi.com","tld":"com"},"ip":{"addr":"45.223.19.142","port":443,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.samsungvi.com/","date":"2026-03-04T12:28:05.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.samsungvi.com","organization":"SAMSUNG ELECTRONICS CO,.LTD"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 11 Dec 2025 00:00:00 GMT","end":"Mon, 11 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"0D:87:29:2B:B9:4C:06:62:A1:CF:FC:CA:24:E9:D3:31:29:20:6E:E7","sha256":"B6:DD:2F:4F:44:48:16:48:8E:46:B1:81:13:19:23:9D:01:DA:73:03:93:FE:21:5C:47:29:BE:7B:20:D3:37:F0"}}},"request":{"raw":"GET /_Incapsula_Resource?SWKMTFSR=1\u0026e=0.34468077636878003 HTTP/1.1\r\nHost: www.samsungvi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.samsungvi.com/\r\nCookie: visid_incap_3166649=S/MG++tZRS26UdHGFC0CHVMlqGkAAAAAQUIPAAAAAADJhmQ06rOlXwqN973rxupM; incap_ses_7233_3166649=/hKhAQOloXoQbo1JssdgZFQlqGkAAAAA/2flDae3meumca8o+fEXCw==; ___utmvc=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\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store\r\ncontent-type: text/plain\r\nx-robots-tag: noindex\r\ncontent-length: 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1,"size_decoded":0,"mime_type":"text/plain","magic":"very short file (no magic)","md5":"c4ca4238a0b923820dcc509a6f75849b","sha1":"356a192b7913b04c54574d18c28d46e6395428ab","sha256":"6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b","sha512":"4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a","ssdeep":"","tlshash":"c70000000c000000c00000300000000000000000000000000000000000000000000030","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-04-04T13:32:08.332046Z","times_seen":104806,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.samsungvi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.samsungvi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.samsungvi.com/js/chunk-echarts.ccfc4ec0.js","fqdn":"www.samsungvi.com","domain":"samsungvi.com","tld":"com"},"ip":{"addr":"45.223.19.142","port":443,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.samsungvi.com/","date":"2026-03-04T12:28:09.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.samsungvi.com","organization":"SAMSUNG ELECTRONICS CO,.LTD"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 11 Dec 2025 00:00:00 GMT","end":"Mon, 11 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"0D:87:29:2B:B9:4C:06:62:A1:CF:FC:CA:24:E9:D3:31:29:20:6E:E7","sha256":"B6:DD:2F:4F:44:48:16:48:8E:46:B1:81:13:19:23:9D:01:DA:73:03:93:FE:21:5C:47:29:BE:7B:20:D3:37:F0"}}},"request":{"raw":"GET /js/chunk-echarts.ccfc4ec0.js HTTP/1.1\r\nHost: www.samsungvi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.samsungvi.com/\r\nCookie: visid_incap_3166649=S/MG++tZRS26UdHGFC0CHVMlqGkAAAAAQUIPAAAAAADJhmQ06rOlXwqN973rxupM; incap_ses_7233_3166649=/hKhAQOloXoQbo1JssdgZFQlqGkAAAAA/2flDae3meumca8o+fEXCw==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 12:28:09 GMT\r\ncontent-type: application/javascript\r\nserver: nginx\r\nlast-modified: Tue, 03 Mar 2026 06:16:36 GMT\r\netag: \"69a67cc4-cc33b\"\r\naccept-ranges: bytes\r\nx-cdn: Imperva\r\ncontent-encoding: gzip\r\nx-iinfo: 13-50641977-50642070 PNYN RT(1772627283761 5767) q(0 0 0 -1) r(2 2) U24\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Imperva","description":"Imperva is a cyber security software and services company for networking, data, and application security.","website":"https://www.imperva.com/","common_platform_enumeration":"","icon":"Imperva.svg","categories":["Security","CDN"]}],"data":{"size":836411,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64916), with no line terminators","md5":"4bae29003f0f5959f2fd6e192201f027","sha1":"7749b5303ba89890629ac654a8d14e297a795cb4","sha256":"e61329f62eae1066f0ba0840023259c971a1aa803d79ac49a7c9f8ceecc4ca0b","sha512":"d54653abd6e352cec004fb49271c7fbc8cd045c9e38f6773401c233c5e22bb9a46b3de05d40806db14d87cd9f54938f1b14fa9d2622b69cd71ee01b82826f7d4","ssdeep":"12288:qBLebAY8iK0w/eUItzKRaDolz7AZvMIx7PcPBrK4WMiYBf8sKge6:qQbbCIzMaMl3ctcRFWMiYF8sKc","tlshash":"b005f99cb614703543a731b8556f080f9336680da50b85a8fa6ad9da6cbd44f323bf7c","first_seen":"2026-03-04T12:28:35.730309Z","last_seen":"2026-03-04T12:28:35.730309Z","times_seen":1,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.samsungvi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.samsungvi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.samsungvi.com/js/login.078bf275.js","fqdn":"www.samsungvi.com","domain":"samsungvi.com","tld":"com"},"ip":{"addr":"45.223.19.142","port":443,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.samsungvi.com/","date":"2026-03-04T12:28:09.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.samsungvi.com","organization":"SAMSUNG ELECTRONICS CO,.LTD"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 11 Dec 2025 00:00:00 GMT","end":"Mon, 11 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"0D:87:29:2B:B9:4C:06:62:A1:CF:FC:CA:24:E9:D3:31:29:20:6E:E7","sha256":"B6:DD:2F:4F:44:48:16:48:8E:46:B1:81:13:19:23:9D:01:DA:73:03:93:FE:21:5C:47:29:BE:7B:20:D3:37:F0"}}},"request":{"raw":"GET /js/login.078bf275.js HTTP/1.1\r\nHost: www.samsungvi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.samsungvi.com/\r\nCookie: visid_incap_3166649=S/MG++tZRS26UdHGFC0CHVMlqGkAAAAAQUIPAAAAAADJhmQ06rOlXwqN973rxupM; incap_ses_7233_3166649=/hKhAQOloXoQbo1JssdgZFQlqGkAAAAA/2flDae3meumca8o+fEXCw==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 12:28:09 GMT\r\ncontent-type: application/javascript\r\nserver: nginx\r\nlast-modified: Tue, 03 Mar 2026 06:16:36 GMT\r\netag: \"69a67cc4-1f435\"\r\naccept-ranges: bytes\r\nx-cdn: Imperva\r\ncontent-encoding: gzip\r\nx-iinfo: 13-50641977-50642078 PNYN RT(1772627283761 5773) q(0 0 0 -1) r(2 2) U24\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Imperva","description":"Imperva is a cyber security software and services company for networking, data, and application security.","website":"https://www.imperva.com/","common_platform_enumeration":"","icon":"Imperva.svg","categories":["Security","CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":128053,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"629165517dc5db2eb37b1e9419855d21","sha1":"fec967d263d035a76a79b6e1fd2f4e5524dc6e6e","sha256":"04ca44f213c081e41e287b03054846133d50ec1cadd9303668691af750270e93","sha512":"db2a3f35855affd2e3042fde8967885095fa65b7334d203dc1059591ac7c764b05355f30245fe91dc185e54ef399b75f35f60f8d392fc10ae97c60103010dc4c","ssdeep":"3072:6LQcDQP7qSq4Y2/RraYiHDKAG/CgFdc+4OjxLIqaYiAgGxiKTga4gMkgM/g6Zgqy:6LQcDa7q/4Y2JraYiGAG/Cejx7aYiAnQ","tlshash":"d3c3e896362688bdd6aa424c90eb5c1462763f0d604344bcf3bc8c9d3bd6e6171adb37","first_seen":"2026-03-04T12:28:35.731611Z","last_seen":"2026-03-04T12:28:35.731611Z","times_seen":1,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.samsungvi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.samsungvi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.samsungvi.com/vi/loginUser/loginPage","fqdn":"api.samsungvi.com","domain":"samsungvi.com","tld":"com"},"ip":{"addr":"45.223.19.142","port":443,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.samsungvi.com/","date":"2026-03-04T12:28:11.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.samsungvi.com","organization":"SAMSUNG ELECTRONICS CO,.LTD"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 11 Dec 2025 00:00:00 GMT","end":"Mon, 11 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"0D:87:29:2B:B9:4C:06:62:A1:CF:FC:CA:24:E9:D3:31:29:20:6E:E7","sha256":"B6:DD:2F:4F:44:48:16:48:8E:46:B1:81:13:19:23:9D:01:DA:73:03:93:FE:21:5C:47:29:BE:7B:20:D3:37:F0"}}},"request":{"raw":"GET /vi/loginUser/loginPage HTTP/1.1\r\nHost: api.samsungvi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Language: en\r\nOrigin: https://www.samsungvi.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.samsungvi.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 12:28:11 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: nginx\r\naccess-control-allow-origin: *\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nset-cookie: visid_incap_3166650=XYJaZPqYRyijwI8M4vEDPlclqGkAAAAAQUIPAAAAAADJo7RcisXryJidGkmEkrVm; expires=Wed, 03 Mar 2027 22:31:36 GMT; HttpOnly; path=/; Domain=.samsungvi.com\nincap_ses_7233_3166650=1VpVMTwDiiXMcI1JssdgZFslqGkAAAAA028JcQ/DVyEE2Sk1GiX5bQ==; path=/; Domain=.samsungvi.com\r\nx-cdn: Imperva\r\ncontent-encoding: gzip\r\nx-iinfo: 7-32866792-32866795 PNYN RT(1772627287765 3398) q(0 0 0 2) r(3 3) U24\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Imperva","description":"Imperva is a cyber security software and services company for networking, data, and application security.","website":"https://www.imperva.com/","common_platform_enumeration":"","icon":"Imperva.svg","categories":["Security","CDN"]}],"data":{"size":103,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"78846c373a6854813db0da291d1b8226","sha1":"682d5a79742a41975c694524f88afef3848df04b","sha256":"ed72e7a3fda42ba5c663dbfc711d6c137595147d6b8b1acbc5a605f993ad4974","sha512":"dd02b0199bebb453ba3e885a49585c001de97c464ce920f6ffc6e92bf0729d38db7e2c0b7f0aaa303dcf9d949e9caf6feb0ce88477a5ecc1ad5c0031639ffdfa","ssdeep":"","tlshash":"00b09203028a0ee698403181091d2f0420fc247240508b10edce5220ca61431619382b","first_seen":"2026-03-04T12:28:35.732809Z","last_seen":"2026-03-04T12:28:35.732809Z","times_seen":1,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"api.samsungvi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"api.samsungvi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.samsungvi.com/js/chunk-element-plus.f13d9f2c.js","fqdn":"www.samsungvi.com","domain":"samsungvi.com","tld":"com"},"ip":{"addr":"45.223.19.142","port":443,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.samsungvi.com/","date":"2026-03-04T12:28:05.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.samsungvi.com","organization":"SAMSUNG ELECTRONICS CO,.LTD"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 11 Dec 2025 00:00:00 GMT","end":"Mon, 11 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"0D:87:29:2B:B9:4C:06:62:A1:CF:FC:CA:24:E9:D3:31:29:20:6E:E7","sha256":"B6:DD:2F:4F:44:48:16:48:8E:46:B1:81:13:19:23:9D:01:DA:73:03:93:FE:21:5C:47:29:BE:7B:20:D3:37:F0"}}},"request":{"raw":"GET /js/chunk-element-plus.f13d9f2c.js HTTP/1.1\r\nHost: www.samsungvi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.samsungvi.com/\r\nCookie: visid_incap_3166649=S/MG++tZRS26UdHGFC0CHVMlqGkAAAAAQUIPAAAAAADJhmQ06rOlXwqN973rxupM; incap_ses_7233_3166649=/hKhAQOloXoQbo1JssdgZFQlqGkAAAAA/2flDae3meumca8o+fEXCw==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 12:28:05 GMT\r\ncontent-type: application/javascript\r\nserver: nginx\r\nlast-modified: Tue, 03 Mar 2026 06:16:36 GMT\r\netag: \"69a67cc4-6e3fd\"\r\naccept-ranges: bytes\r\nx-cdn: Imperva\r\ncontent-encoding: gzip\r\nx-iinfo: 13-50641977-50642070 NNYN CT(263 271 0) RT(1772627283761 1271) q(0 0 5 -1) r(8 8) U24\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Imperva","description":"Imperva is a cyber security software and services company for networking, data, and application security.","website":"https://www.imperva.com/","common_platform_enumeration":"","icon":"Imperva.svg","categories":["Security","CDN"]}],"data":{"size":451581,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0a7ebd886fee964c364c0a2d9462d81e","sha1":"aecc0a74d24b20e7fd7cd31769008890a67d8fc0","sha256":"a1ef0e050201ac63977d6dce5333a0a692e6134cbe6d29fbd3be178e5622ffc8","sha512":"9fe6602d6f630b69ee268e0ccbecc8244cc2181e2725921b35f406141e49c7e061249bd90009732c343ab9438a82341e339fe97b21ba408509262085d0bec3a9","ssdeep":"6144:koIQj4pEPcvDTn0t2wqtQwUWVsU1BhzTuV6:hbj4ycXn0t2wqtQwDVpXdO6","tlshash":"a2a42ad17941f42173fa4aca41da0418a33a1f0d74019cf4b2beee1a1a5fd85a16bbfd","first_seen":"2026-03-04T12:28:35.733888Z","last_seen":"2026-03-04T12:28:35.733888Z","times_seen":1,"resource_available":true,"data":null}},"time_used":834,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":834,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.samsungvi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.samsungvi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.samsungvi.com/js/chunk-libs.6fb81f50.js","fqdn":"www.samsungvi.com","domain":"samsungvi.com","tld":"com"},"ip":{"addr":"45.223.19.142","port":443,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.samsungvi.com/","date":"2026-03-04T12:28:05.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.samsungvi.com","organization":"SAMSUNG ELECTRONICS CO,.LTD"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 11 Dec 2025 00:00:00 GMT","end":"Mon, 11 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"0D:87:29:2B:B9:4C:06:62:A1:CF:FC:CA:24:E9:D3:31:29:20:6E:E7","sha256":"B6:DD:2F:4F:44:48:16:48:8E:46:B1:81:13:19:23:9D:01:DA:73:03:93:FE:21:5C:47:29:BE:7B:20:D3:37:F0"}}},"request":{"raw":"GET /js/chunk-libs.6fb81f50.js HTTP/1.1\r\nHost: www.samsungvi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.samsungvi.com/\r\nCookie: visid_incap_3166649=S/MG++tZRS26UdHGFC0CHVMlqGkAAAAAQUIPAAAAAADJhmQ06rOlXwqN973rxupM; incap_ses_7233_3166649=/hKhAQOloXoQbo1JssdgZFQlqGkAAAAA/2flDae3meumca8o+fEXCw==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 12:28:05 GMT\r\ncontent-type: application/javascript\r\nserver: nginx\r\nlast-modified: Tue, 03 Mar 2026 06:16:36 GMT\r\netag: \"69a67cc4-852e3\"\r\naccept-ranges: bytes\r\nx-cdn: Imperva\r\ncontent-encoding: gzip\r\nx-iinfo: 13-50641977-50642072 NNYN CT(265 269 0) RT(1772627283761 1274) q(0 0 5 -1) r(8 8) U24\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Imperva","description":"Imperva is a cyber security software and services company for networking, data, and application security.","website":"https://www.imperva.com/","common_platform_enumeration":"","icon":"Imperva.svg","categories":["Security","CDN"]}],"data":{"size":545507,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (54555)","md5":"8e7e8113ed32dedb15d4c76e72cac1af","sha1":"735b626e0dbf628367cd5a6efdcaa34a29d5e4fd","sha256":"31aa49b6e97fcdb0885c848c3f045e712df1c365232a9ad622c9cbc0636ce774","sha512":"c321034adfe389c8dd322dadc3bf8b5f4ed86929fedc17db7c7921bca0a52236cbd14adda01f4b477cf233cd04e9931b08e9744946407a8ed1b315933ceba006","ssdeep":"6144:irhvNDqzxRaFNAs4EoBEcG6IfdhviP1ChcMj/7Kqlt90YbaEaAh7qHMZWEKCuDQG:OhvbNAcoSPbKNC5j/BBB57qXF","tlshash":"1ec406d8b292b06503a714e5403f150bf33a6999740f84a4f2a8f8ea7c7945e9277f7c","first_seen":"2026-03-04T12:28:35.734827Z","last_seen":"2026-03-04T12:28:35.734827Z","times_seen":1,"resource_available":true,"data":null}},"time_used":835,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":835,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.samsungvi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.samsungvi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.samsungvi.com/SBVI_Logo-04.ico","fqdn":"www.samsungvi.com","domain":"samsungvi.com","tld":"com"},"ip":{"addr":"45.223.19.142","port":443,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.samsungvi.com/","date":"2026-03-04T12:28:07.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.samsungvi.com","organization":"SAMSUNG ELECTRONICS CO,.LTD"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 11 Dec 2025 00:00:00 GMT","end":"Mon, 11 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"0D:87:29:2B:B9:4C:06:62:A1:CF:FC:CA:24:E9:D3:31:29:20:6E:E7","sha256":"B6:DD:2F:4F:44:48:16:48:8E:46:B1:81:13:19:23:9D:01:DA:73:03:93:FE:21:5C:47:29:BE:7B:20:D3:37:F0"}}},"request":{"raw":"GET /SBVI_Logo-04.ico HTTP/1.1\r\nHost: www.samsungvi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.samsungvi.com/\r\nCookie: visid_incap_3166649=S/MG++tZRS26UdHGFC0CHVMlqGkAAAAAQUIPAAAAAADJhmQ06rOlXwqN973rxupM; incap_ses_7233_3166649=/hKhAQOloXoQbo1JssdgZFQlqGkAAAAA/2flDae3meumca8o+fEXCw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 12:28:07 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 3901\r\nserver: nginx\r\nlast-modified: Tue, 03 Mar 2026 06:16:36 GMT\r\netag: \"69a67cc4-f3d\"\r\naccept-ranges: bytes\r\nx-cdn: Imperva\r\nx-iinfo: 13-50641977-50642070 PNNN RT(1772627283761 3721) q(0 0 0 -1) r(3 3) U24\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Imperva","description":"Imperva is a cyber security software and services company for networking, data, and application security.","website":"https://www.imperva.com/","common_platform_enumeration":"","icon":"Imperva.svg","categories":["Security","CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3901,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"e322e31f9f68dadd7b6abbb5610aad78","sha1":"17f48f2181c845be05d8c6fa70f7fad786ab9e94","sha256":"644259e8a3ec06322a62ae1b51e71f36a12ad1e2d10c9a660933458fe64c98a7","sha512":"8b95bd69f7472cc1bffb9e36b9891b09e95cea8c6ab3921057b1a15dc6a30767f601712eadff52a8e0bac30e717d718e20dcb4416ab705b76212538dc115f86e","ssdeep":"","tlshash":"ca816c085fab4004233278f110538fc2d5784d22814f7602b2fbeaa7af6865ea9e9735","first_seen":"2026-03-04T12:28:35.735723Z","last_seen":"2026-03-04T12:28:35.735723Z","times_seen":1,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":274,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.samsungvi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.samsungvi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.samsungvi.com/js/chunk-default.72f0f4e6.js","fqdn":"www.samsungvi.com","domain":"samsungvi.com","tld":"com"},"ip":{"addr":"45.223.19.142","port":443,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.samsungvi.com/","date":"2026-03-04T12:28:09.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.samsungvi.com","organization":"SAMSUNG ELECTRONICS CO,.LTD"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 11 Dec 2025 00:00:00 GMT","end":"Mon, 11 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"0D:87:29:2B:B9:4C:06:62:A1:CF:FC:CA:24:E9:D3:31:29:20:6E:E7","sha256":"B6:DD:2F:4F:44:48:16:48:8E:46:B1:81:13:19:23:9D:01:DA:73:03:93:FE:21:5C:47:29:BE:7B:20:D3:37:F0"}}},"request":{"raw":"GET /js/chunk-default.72f0f4e6.js HTTP/1.1\r\nHost: www.samsungvi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.samsungvi.com/\r\nCookie: visid_incap_3166649=S/MG++tZRS26UdHGFC0CHVMlqGkAAAAAQUIPAAAAAADJhmQ06rOlXwqN973rxupM; incap_ses_7233_3166649=/hKhAQOloXoQbo1JssdgZFQlqGkAAAAA/2flDae3meumca8o+fEXCw==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 12:28:09 GMT\r\ncontent-type: application/javascript\r\nserver: nginx\r\nlast-modified: Tue, 03 Mar 2026 06:16:36 GMT\r\netag: \"69a67cc4-8513\"\r\naccept-ranges: bytes\r\nx-cdn: Imperva\r\ncontent-encoding: gzip\r\nx-iinfo: 13-50641977-50642076 PNYN RT(1772627283761 5771) q(0 0 0 -1) r(2 2) U24\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Imperva","description":"Imperva is a cyber security software and services company for networking, data, and application security.","website":"https://www.imperva.com/","common_platform_enumeration":"","icon":"Imperva.svg","categories":["Security","CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34067,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (34064), with no line terminators","md5":"acabea7b2406560200f6cdabdb27645d","sha1":"08e5ebe4aa473089d4aa35a9110f37ff7206366c","sha256":"296ac884def7f7163d175bf2014f0b6f7e6ed1c15290a4b005eafe5f64051d5e","sha512":"00642fe13a200aec8feec1b4bf93e13ae7c01444fd63c2db416a5fed738001bd108880852f8d409ea16565dfd6f0bf8cc196094a7e157fb5903bc017de46ec0e","ssdeep":"768:CLuERH/G3Xxn/g5gHZV1IEJSkxi3aaUPCIHp7ZniJFNlQJhrGbQlvCMyQlM35GyO:xER8/xb8G","tlshash":"b2e2e8847379d0ad85a3438961ab102c223f375a350b4c78f63cfe6a1ba7d64b153b79","first_seen":"2026-03-04T12:28:35.736479Z","last_seen":"2026-03-04T12:28:35.736479Z","times_seen":1,"resource_available":true,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.samsungvi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.samsungvi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.samsungvi.com/css/login.e03644b1.css","fqdn":"www.samsungvi.com","domain":"samsungvi.com","tld":"com"},"ip":{"addr":"45.223.19.142","port":443,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.samsungvi.com/","date":"2026-03-04T12:28:09.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.samsungvi.com","organization":"SAMSUNG ELECTRONICS CO,.LTD"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 11 Dec 2025 00:00:00 GMT","end":"Mon, 11 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"0D:87:29:2B:B9:4C:06:62:A1:CF:FC:CA:24:E9:D3:31:29:20:6E:E7","sha256":"B6:DD:2F:4F:44:48:16:48:8E:46:B1:81:13:19:23:9D:01:DA:73:03:93:FE:21:5C:47:29:BE:7B:20:D3:37:F0"}}},"request":{"raw":"GET /css/login.e03644b1.css HTTP/1.1\r\nHost: www.samsungvi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.samsungvi.com/\r\nCookie: visid_incap_3166649=S/MG++tZRS26UdHGFC0CHVMlqGkAAAAAQUIPAAAAAADJhmQ06rOlXwqN973rxupM; incap_ses_7233_3166649=/hKhAQOloXoQbo1JssdgZFQlqGkAAAAA/2flDae3meumca8o+fEXCw==\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 12:28:09 GMT\r\ncontent-type: text/css\r\nserver: nginx\r\nlast-modified: Tue, 03 Mar 2026 06:16:36 GMT\r\netag: \"69a67cc4-a463\"\r\naccept-ranges: bytes\r\nx-cdn: Imperva\r\ncontent-encoding: gzip\r\nx-iinfo: 13-50641977-50642074 PNYN RT(1772627283761 5772) q(0 0 0 -1) r(2 2) U24\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Imperva","description":"Imperva is a cyber security software and services company for networking, data, and application security.","website":"https://www.imperva.com/","common_platform_enumeration":"","icon":"Imperva.svg","categories":["Security","CDN"]}],"data":{"size":42083,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (42083), with no line terminators","md5":"24a49b3272db7be59cbef453b4a4f85e","sha1":"c909988d853a78562e970ebb36b5af3312e81a51","sha256":"fab1f12179b0ec0c20afe7ea35991cc4a3f848bbfee17117e144571dc4dce492","sha512":"0e77eff5bd589fe5da34988d12eeed50a7827145c93eebf82adf6b0e8907810b63c2e4f63f91d60f2f9bcd0f76b3edbc8ece365cfe448ffe5f17e96f04224e9c","ssdeep":"768:QRfnaZ6AWUxdN3CFaaL4Wq89igf+TroqEl/myP+/x7F5zxFQM2Ly4xt6ub6kCzjL:CkE14","tlshash":"f8131329730f2197b5efd01958754b8646643b27b3024ae5bf2b72358cab082673fd8d","first_seen":"2026-03-04T12:28:35.73731Z","last_seen":"2026-03-04T12:28:35.73731Z","times_seen":1,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.samsungvi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.samsungvi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}